I noticed these too! I have a screenshot showing my freshly restarted nodes (they don’t have full inbound peers again yet) and these nodes connecting and disconnecting at the same time to my nodes.
Also have this log line:
receive version message: /Satoshi:27.0.0/: version 70016, blocks=754565, us=*:8333, txrelay=0, peer=55068 peeraddr=78.47.52.58:36232, mapped_as=24940
And probably more data to analyze in archived debug.logs. I’ll post an update here once I get to analyzing them.